Live data from Hacker News

InstaNFC – Access Control Hardware for Developers

instanfc.com

1–10 of 25 posts

Re: InstaNFC – Access Control Hardware for Developers

#4
post #3

If I understand this correctly, this project seems to encourage developing AC systems with the authorization logic on the public side. If so, keep in mind that a hammer would be as effective as any authorized contactless device.

From the website: “Read NFC tags to open doors with electric strikes (integrated 12V relay) or motors (toggle GND). A second board can be used as an antenna for enhanced security.”

For lower security scenarios like access to hotel rooms (where trust has already been established) it is sufficient. Plus using a case with proprietary screws, or even making it inaccessible from the outside can also help with security.

Re: InstaNFC – Access Control Hardware for Developers

#7
post #5

RC522 and ESP32 is something an amateur can glue together. I cannot see why is this project a thing. I would expect a TPM alike module at least.

I see it as similar to a RPi - great for POC or smaller deployments, especially if you have different requirements on different projects because you can share the same knowledge base, but for a large deployment you'd probably invest the time and money into sourcing something more specific.

I've had lots of half-baked ideas for things to do around the house that this would be very cool for, since I'm not 100% sure what functionality (and therefore hardware) I'll really need.

Re: InstaNFC – Access Control Hardware for Developers

#9

This would be much more interesting if it had Apple VAS & Google SmartTap support. Although, I suppose that'd require proprietary blobs and a enterprisey admission process.

Those chips and protocols are closely guarded, alternatively the hardware has BLE support. I did already create a proof of concept offline-only Apple Watch access app.

Re: InstaNFC – Access Control Hardware for Developers

#10
NFC tags aka MIFARE Classic and the like? Those would be susceptible to cloning with something like Chameleon Tiny and to repeater attacks. You need actual contactless smartcard support if you want to use it for something serious. Otherwise be ready for LockPickingLawyer making an example of you of how not to do it, he already has similar videos about it.

PC/SC compatible stuff is out there if you know where to look (not affiliated with them) https://webshop.d-logic.net/products/nfc-rfid-reader-writer/...

(ignore the cards they include with the order, proper contactless smartcards or something like an OMNI ring https://store.nfcring.com/products/omni need to be purchased separately)

Post reply on HN